VULNERABILITY INTELLIGENCE

CVE-2023-48720

CVSS score9.8 CRITICAL

EPSS probability0.67%

CISA KEVNot currently listed

Published2023-12-21

Last modified2026-06-17

Description

Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'password' parameter of the login.php resource does not validate the characters received and they are sent unfiltered to the database.